Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa
File:                     323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa (raw, json)
Hash identifier:          a6Vm2RZYIvbtu0nkojFMKBQy+hlu+BV7uUAEePLvGxM=
Subject key identifier:   59:56:78:D9:B0:75:13:79:47:84:14:C9:80:D2:84:4C:1E:5B:C5:2A
Certificate issuer:       /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Certificate serial:       0510C4C6B361237AF8F2F29ACD74F2D91B7661BD
Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa
Signing time:             Tue 04 Feb 2025 02:38:09 +0000
ROA not before:           Tue 04 Feb 2025 02:33:09 +0000
ROA not after:            Tue 03 Feb 2026 02:38:09 +0000
asID:                     271599
IP address blocks:        2804:7e0c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:10:c4:c6:b3:61:23:7a:f8:f2:f2:9a:cd:74:f2:d9:1b:76:61:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
        Validity
            Not Before: Feb  4 02:33:09 2025 GMT
            Not After : Feb  3 02:38:09 2026 GMT
        Subject: CN=595678D9B0751379478414C980D2844C1E5BC52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:2d:24:ce:fc:0b:d8:38:a0:a7:48:d8:c4:
                    6d:92:4d:6e:ca:29:73:1c:56:d5:9d:3f:57:cf:88:
                    be:d5:c5:40:f6:41:5d:07:59:43:f7:a8:cc:1c:2f:
                    65:a7:5a:21:7c:d4:0d:fa:3b:20:ca:92:f9:6f:a0:
                    4d:1d:2e:3e:59:be:49:d1:01:1c:6c:4f:ed:74:b0:
                    6a:80:9d:78:f5:3e:83:dd:78:5b:0b:c8:9f:07:04:
                    4d:6b:f4:23:34:f1:0f:6e:e3:e1:d0:b2:ec:f5:94:
                    af:e1:c2:23:ec:ab:4b:04:75:6d:c3:92:39:a7:f2:
                    3d:61:ed:52:5f:00:a2:6e:66:2b:d5:95:48:74:14:
                    3c:1a:0f:08:c5:14:0c:f3:0e:fc:16:23:1e:0f:e9:
                    05:35:43:01:61:97:ea:0e:c2:02:0c:a7:d3:bc:2a:
                    2d:b9:a7:8c:7a:45:41:88:0e:54:51:30:ab:48:5b:
                    df:23:73:25:c0:59:b0:51:58:e7:ec:d2:ba:d2:43:
                    ab:42:7a:a6:79:5e:2b:4b:31:bf:d5:4a:18:0c:7b:
                    b9:03:d7:62:a6:e1:1f:2b:7f:f5:0e:73:6a:58:4f:
                    e8:d1:a6:4b:ac:46:bf:08:96:19:af:38:58:f0:0c:
                    47:9e:4a:cf:02:67:a5:c5:91:6c:b7:6e:45:24:d3:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:56:78:D9:B0:75:13:79:47:84:14:C9:80:D2:84:4C:1E:5B:C5:2A
            X509v3 Authority Key Identifier:
                keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         cc:56:1a:74:c0:e2:73:6f:b1:45:3a:01:1d:63:92:c7:25:5c:
         00:d5:b1:54:1b:1a:e0:c3:db:fe:f9:08:22:b4:57:73:4b:d0:
         9c:9b:67:78:f4:a4:42:53:b7:07:b5:34:67:8e:4e:e7:51:c3:
         30:57:8f:6e:ba:65:58:83:32:5f:4e:a0:1c:2f:b1:d9:b5:33:
         df:1c:9d:b2:23:aa:13:1a:69:c5:70:e2:91:00:4e:88:f0:cf:
         5a:e4:0f:ae:f5:b3:eb:f4:1b:d1:0e:fb:cf:f5:60:ad:a3:ab:
         31:36:16:35:ef:65:82:dd:c4:52:fc:f5:91:a4:dd:f9:d8:cc:
         4e:86:f7:ed:a0:3d:0f:49:ba:ed:07:a9:da:67:da:94:fc:4f:
         7b:be:46:84:c2:00:70:1a:f1:7f:9b:c4:a3:a2:4e:f4:63:c2:
         4a:9e:71:1c:10:20:1e:ca:1e:06:36:a1:f6:99:15:49:b4:64:
         5f:82:28:4a:44:af:43:15:cf:8e:7f:b1:b2:97:46:4f:fb:a9:
         18:e9:8e:15:ab:b5:ca:29:45:b1:0c:da:7b:6d:fe:89:6e:e2:
         e2:84:3f:cc:fa:55:71:7a:c8:70:a4:27:14:d9:66:4c:23:39:
         1c:53:5a:a3:99:43:03:b3:d5:63:01:84:3b:2a:d5:e7:59:c1:
         3a:4c:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:47 2025 by rpki-client